Procedure for generating a digital identity of a user of a mobile device, digital identity of the user, and authentication procedure using said digital identity of the user

Abstract

The invention refers to a procedure for generating a digital identity for a user (100) of a mobile device (10), based on a digital certificate generated by a certificate authority. The mobile device (10) is associated with a first mobile identification number (MSISDN). The user can access an executable application (11) which is installed either on the mobile device or on a second device that can run the application. The application:contains a key container for at least a public key and a private key which are associated with the aforementioned first mobile identification number;is associated with a unique application identifier; andincludes connection logic for connecting with a mobile identity server (30).The procedure consists of a series of stages whereby the user's mobile digital identity is generated from the first mobile identification number (MSISDN), the user's digital certificate, and the unique application identifier.The invention also refers to the digital identity of a user (100), a procedure for authenticating a user which makes use of said digital identity. And an application (11) which can be installed in a mobile device (10) or a second device that is able to run the application, to generate a digital identity for the user (100) of the mobile device (10).

Description

[0001]Procedure for generating a digital identity of a user of a mobile device, digital identity of the user, and authentication procedure using said digital identity of the user.PURPOSE OF THE INVENTION[0002]The present invention falls under the category of authentication systems between two parties, one of the parties being a user of a mobile device, and is based on PKI (Public Key Infrastructure) and on electronic certificates, regardless of the certification authority and the phone carriers.BACKGROUND OF THE INVENTION[0003]In general terms, the main purpose of an authentication system is to be able to verify the identity of a user who is trying to access a remote system, or verify the authorship of an act.[0004]To this end, different authentication elements or factors can be used: something you have (card, mobile phone, mobile phone line, etc.); something you know (password, PIN, One-Time Password); or a biometric characteristic of the user (iris, voice, fingerprint, etc.).[0005...

AI Technical Summary

Benefits of technology

The invention described in this patent allows for a digital identity to be created and managed in a mobile device without needing to connect to a network. This means that users can complete tasks, sign documents, and access other services without needing to constantly be connected. Additionally, when the network is re-connected, the information is automatically synchronized with a server without user intervention. Overall, the invention provides a more convenient and secure way to manage one's digital identity on a mobile device.

Problems solved by technology

In certain systems, one of these factors is not enough to guarantee the identity; for this reason, two-factor authentication is used in some systems.

In this case, there is usually a combination of something the user knows (PIN or password) and something the user has, which is unique and very difficult to replicate.

When user authentication is carried out through a network or a channel other than the main network or channel (‘out-of-band’), there is the risk of suffering a man-in-the-middle attack.

Nevertheless, Mobile Signature technology requires using cryptographic SIMs and these are not yet mass produced; for this reason, Mobile Signature is not fully interoperable between different mobile phone carriers.

The operator handles both the key management application (embedded into the card) and the registration and authentication system and, as a consequence, mass deployment is difficult.

As a result, it is hard to ensure the solution's scalability since there is operator dependency hardware- and network-wise.

Images